Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:hdf5:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductHdf5 (ad4b85cd-30c7-50c9-b72f-ca7c8b8be884)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-7069 vulnerable 2026-06-08 07:43:17.955193 HDF5 H5FSsection.c H5FS__sect_link_size heap-based overflow
LOW (3.3)
A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5FS__sect_link_size of the file src/H5FSsection.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
Published: 2025-07-04T21:02:06.876Z
Updated: 2025-07-08T13:38:56.989Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7068 vulnerable 2026-06-08 07:43:17.954815 HDF5 H5FL.c H5FL__malloc memory leak
LOW (3.3)
A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. This issue affects the function H5FL__malloc of the file src/H5FL.c. The manipulation leads to memory leak. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
Published: 2025-07-04T20:32:06.420Z
Updated: 2025-07-08T13:56:18.646Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7067 vulnerable 2026-06-08 07:43:17.954402 HDF5 H5FScache.c H5FS__sinfo_serialize_node_cb heap-based overflow
LOW (3.3)
A vulnerability classified as problematic was found in HDF5 1.14.6. This vulnerability affects the function H5FS__sinfo_serialize_node_cb of the file src/H5FScache.c. The manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.
Published: 2025-07-04T18:02:05.802Z
Updated: 2025-07-08T13:57:09.724Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6858 vulnerable 2026-06-08 07:43:16.557428 HDF5 H5Centry.c H5C__flush_single_entry null pointer dereference
LOW (3.3)
A vulnerability was found in HDF5 1.14.6 and classified as problematic. Affected by this issue is the function H5C__flush_single_entry of the file src/H5Centry.c. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.
Published: 2025-06-29T11:00:14.487Z
Updated: 2025-06-30T20:11:40.651Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6857 vulnerable 2026-06-08 07:43:16.556835 HDF5 H5Gnode.c H5G__node_cmp3 stack-based overflow
LOW (3.3)
A vulnerability has been found in HDF5 1.14.6 and classified as problematic. Affected by this vulnerability is the function H5G__node_cmp3 of the file src/H5Gnode.c. The manipulation leads to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
Published: 2025-06-29T10:00:18.376Z
Updated: 2025-06-30T15:49:20.682Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6856 vulnerable 2026-06-08 07:43:16.556312 HDF5 H5FL.c H5FL__reg_gc_list use after free
LOW (3.3)
A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5FL__reg_gc_list of the file src/H5FL.c. The manipulation leads to use after free. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
Published: 2025-06-29T09:31:05.927Z
Updated: 2025-06-30T16:02:47.962Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6818 vulnerable 2026-06-08 07:43:16.495681 HDF5 H5Ochunk.c H5O__chunk_protect heap-based overflow
LOW (3.3)
A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5O__chunk_protect of the file /src/H5Ochunk.c. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
Published: 2025-06-28T15:31:06.437Z
Updated: 2025-06-30T16:05:49.951Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6817 vulnerable 2026-06-08 07:43:16.495173 HDF5 H5Centry.c H5C__load_entry resource consumption
LOW (3.3)
A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. This issue affects the function H5C__load_entry of the file /src/H5Centry.c. The manipulation leads to resource consumption. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.
Published: 2025-06-28T11:31:05.770Z
Updated: 2025-06-30T16:06:39.966Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6816 vulnerable 2026-06-08 07:43:16.494625 HDF5 H5Ofsinfo.c H5O__fsinfo_encode heap-based overflow
LOW (3.3)
A vulnerability classified as problematic was found in HDF5 1.14.6. This vulnerability affects the function H5O__fsinfo_encode of the file /src/H5Ofsinfo.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
Published: 2025-06-28T08:00:18.877Z
Updated: 2025-06-30T16:07:24.252Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6750 vulnerable 2026-06-08 07:43:16.182872 HDF5 H5Omtime.c H5O__mtime_new_encode heap-based overflow
LOW (3.3)
A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. Affected by this issue is the function H5O__mtime_new_encode of the file src/H5Omtime.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
Published: 2025-06-27T02:31:07.257Z
Updated: 2025-06-27T13:37:44.290Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6516 vulnerable 2026-06-08 07:43:15.191368 HDF5 H5Fint.c H5F_addr_decode_len heap-based overflow
MEDIUM (5.3)
A vulnerability has been found in HDF5 up to 1.14.6 and classified as critical. This vulnerability affects the function H5F_addr_decode_len of the file /hdf5/src/H5Fint.c. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
Published: 2025-06-23T17:00:17.189Z
Updated: 2025-06-23T17:40:18.086Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6270 vulnerable 2026-06-08 07:43:14.715117 HDF5 H5FSsection.c H5FS__sect_find_node heap-based overflow
MEDIUM (5.3)
A vulnerability, which was classified as critical, has been found in HDF5 up to 1.14.6. Affected by this issue is the function H5FS__sect_find_node of the file H5FSsection.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
Published: 2025-06-19T16:31:06.224Z
Updated: 2025-06-23T19:30:54.188Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6269 vulnerable 2026-06-08 07:43:14.713676 HDF5 H5Cimage.c H5C__reconstruct_cache_entry heap-based overflow
MEDIUM (5.3)
A vulnerability classified as critical was found in HDF5 up to 1.14.6. Affected by this vulnerability is the function H5C__reconstruct_cache_entry of the file H5Cimage.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
Published: 2025-06-19T16:00:17.595Z
Updated: 2025-06-23T19:30:59.733Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2926 vulnerable 2026-06-08 07:16:58.682890 HDF5 H5Ocache.c H5O__cache_chk_serialize null pointer dereference
LOW (3.3)
A vulnerability was found in HDF5 up to 1.14.6 and classified as problematic. This issue affects the function H5O__cache_chk_serialize of the file src/H5Ocache.c. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
Published: 2025-03-28T20:00:13.574Z
Updated: 2025-07-24T09:43:31.477Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2925 vulnerable 2026-06-08 07:16:58.682365 HDF5 H5MM.c H5MM_realloc double free
LOW (3.3)
A vulnerability has been found in HDF5 up to 1.14.6 and classified as problematic. This vulnerability affects the function H5MM_realloc of the file src/H5MM.c. The manipulation of the argument mem leads to double free. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.
Published: 2025-03-28T20:00:11.000Z
Updated: 2025-07-24T09:43:33.655Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2924 vulnerable 2026-06-08 07:16:58.681863 HDF5 H5HLcache.c H5HL__fl_deserialize heap-based overflow
LOW (3.3)
A vulnerability, which was classified as problematic, was found in HDF5 up to 1.14.6. This affects the function H5HL__fl_deserialize of the file src/H5HLcache.c. The manipulation of the argument free_block leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
Published: 2025-03-28T19:31:04.699Z
Updated: 2025-07-24T09:43:35.784Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2923 vulnerable 2026-06-08 07:16:58.681274 HDF5 H5Fint.c H5F_addr_encode_len heap-based overflow
LOW (3.3)
A vulnerability, which was classified as problematic, has been found in HDF5 up to 1.14.6. Affected by this issue is the function H5F_addr_encode_len of the file src/H5Fint.c. The manipulation of the argument pp leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
Published: 2025-03-28T19:00:08.623Z
Updated: 2025-07-24T09:43:37.926Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2915 vulnerable 2026-06-08 07:16:58.668858 HDF5 H5Faccum.c H5F__accum_free heap-based overflow
LOW (3.3)
A vulnerability classified as problematic was found in HDF5 up to 1.14.6. This vulnerability affects the function H5F__accum_free of the file src/H5Faccum.c. The manipulation of the argument overlap_size leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
Published: 2025-03-28T17:00:08.968Z
Updated: 2025-07-24T09:43:40.199Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2914 vulnerable 2026-06-08 07:16:58.668350 HDF5 H5FScache.c H5FS__sinfo_Srialize_Sct_cb heap-based overflow
LOW (3.3)
A vulnerability classified as problematic has been found in HDF5 up to 1.14.6. This affects the function H5FS__sinfo_Srialize_Sct_cb of the file src/H5FScache.c. The manipulation of the argument sect leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.
Published: 2025-03-28T16:31:05.962Z
Updated: 2025-07-24T09:43:47.499Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2913 vulnerable 2026-06-08 07:16:58.667810 HDF5 H5FL.c H5FL__blk_gc_list use after free
LOW (3.3)
A vulnerability was found in HDF5 up to 1.14.6. It has been rated as critical. Affected by this issue is the function H5FL__blk_gc_list of the file src/H5FL.c. The manipulation of the argument H5FL_blk_head_t leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
Published: 2025-03-28T16:31:04.298Z
Updated: 2025-07-24T09:43:45.350Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2912 vulnerable 2026-06-08 07:16:58.665535 HDF5 H5Omessage.c H5O_msg_flush heap-based overflow
LOW (3.3)
A vulnerability was found in HDF5 up to 1.14.6. It has been declared as problematic. Affected by this vulnerability is the function H5O_msg_flush of the file src/H5Omessage.c. The manipulation of the argument oh leads to heap-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.
Published: 2025-03-28T16:00:11.864Z
Updated: 2025-07-24T09:43:42.913Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2310 vulnerable 2026-06-08 07:16:56.770223 HDF5 Metadata Attribute Decoder H5MM_strndup heap-based overflow
MEDIUM (5.3)
A vulnerability was found in HDF5 1.14.6 and classified as critical. This issue affects the function H5MM_strndup of the component Metadata Attribute Decoder. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The vendor plans to fix this issue in an upcoming release.
Published: 2025-03-14T21:00:09.852Z
Updated: 2025-05-08T08:59:00.157Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2309 vulnerable 2026-06-08 07:16:56.769718 HDF5 Type Conversion Logic H5T__bit_copy heap-based overflow
MEDIUM (5.3)
A vulnerability has been found in HDF5 1.14.6 and classified as critical. This vulnerability affects the function H5T__bit_copy of the component Type Conversion Logic. The manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor plans to fix this issue in an upcoming release.
Published: 2025-03-14T21:00:07.781Z
Updated: 2025-05-08T08:58:58.349Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2308 vulnerable 2026-06-08 07:16:56.767441 HDF5 Scale-Offset Filter H5Z__scaleoffset_decompress_one_byte heap-based overflow
MEDIUM (5.3)
A vulnerability, which was classified as critical, was found in HDF5 1.14.6. This affects the function H5Z__scaleoffset_decompress_one_byte of the component Scale-Offset Filter. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The vendor plans to fix this issue in an upcoming release.
Published: 2025-03-14T20:31:04.336Z
Updated: 2025-05-08T08:58:56.350Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2153 vulnerable 2026-06-08 07:14:58.182872 HDF5 h5 File H5SM.c H5SM_delete heap-based overflow
MEDIUM (5)
A vulnerability, which was classified as critical, was found in HDF5 1.14.6. Affected is the function H5SM_delete of the file H5SM.c of the component h5 File Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.
Published: 2025-03-10T14:00:09.524Z
Updated: 2025-05-12T15:35:33.596Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.